24 ordspråk av Michael Sutton

Michael Sutton

Läs om Michael Sutton på Google eller Bing. Hitta foto...

Patching is very urgent. We expect public exploit code to become available, especially for the MSDTC issue.

A DLL is canned functionality, so if you include a vulnerable DLL in an application, that application is by default vulnerable.

It seems like there is some flaky code in portions of the libraries that handle the WMF files. It wouldn't surprise me if we see more vulnerabilities emerge, which I am sure will be followed by more media coverage.

We're not aware of any public exploit code for it at this time.

Even though Windows Media Player is not something generally used to render images, it has the capability of doing that. It's not difficult to create a Web page that uses Windows Media Player to display an image instead of the default application. I think it's a ripe target for exploitation if we see public exploit code for it.

We want to use [the quarterly hacking challenge] to inspire our contributors to target their research in specific areas. We have a lot of clients running Microsoft products and they want to be protected from critical vulnerabilities.

In 2005, we were credited with reporting 3 'critical' vulnerabilities to Microsoft, and we want to encourage our contributors to keep looking in that direction.

The only model that makes no sense to me is the altruistic model. The vendor wants the researcher to do his code review for free and that doesn't quite fly. They are profiting from the vulnerability information but they don't want to pay for it.

The attraction is that we are not bogged down in tremendous bureaucracies and processes that make it difficult to get the transactions done.

Many of our most valuable contributors consistently identify significant vulnerabilities that may never make the front page, but both avert major exploitation and secure considerable compensation through our rewards program.

We pay people directly for their submissions, and then we also have various programs to reward our loyal contributors and keep them working with us. This is our latest effort to further reward them.

We applaud Compass Group North America for its leadership. Its commitment, and a similar decision by major food retailer Wal-Mart, is a significant step toward transformation of the seafood market in ways that support sustainable fisheries and healthy ocean ecosystems.

The nice thing is that a third party that has nothing to do with [the VCP] is deciding what the criticality is. We're still signing the contract with the researcher and we're still paying the fee for the specific contributor, but we're saying that if it results in a critical bulletin, there's a $10,000 bonus on the table.

He wasn't even drinking or anything. Never drank before.

I would certainly recommend that users implement the vendor workarounds until a patch is made available, ... We feel that exploit code can and will be created.

Sidan 1 av 2

1 2

Nordsprog.dk

Antal ordsprog er 1469560
varav 734875 på nordiska

Ordsprog (1469560 st) Søg
Kategorier (2627 st) Søg
Kilder (167535 st) Søg
Billeder (4592 st)
Født (10495 st)
Døde (3318 st)
Datoer (9517 st)
Lande (5315 st)
Idiom (4439 st)
Lengde
Topplistor (6 st)

Ordspråksmusik (20 st)
Statistik

Michael Sutton proverb